Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
File:                     ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft (raw, json)
Hash identifier:          qNI0SNa0FXYtiq9aL+yJL1vLVp3oGjjqY43+7Gu5UIQ=
Subject key identifier:   24:4A:CC:EC:65:5E:34:D0:73:E6:82:1A:37:68:DC:97:63:12:1D:A7
Authority key identifier: C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
Certificate issuer:       /CN=A9199656/serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
Manifest number:          B2
Signing time:             Sun 05 Apr 2026 06:29:43 +0000
Manifest this update:     Sun 05 Apr 2026 06:29:43 +0000
Manifest next update:     Sun 12 Apr 2026 06:29:43 +0000
Files and hashes:         1: ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl (hash: thUqR3Mj6lmgoxFvWE+laA+w055pHsDEJhhoSRjF4pc=)
                          2: 45D237A423E211F0A5DCED27C4F9AE02.roa (hash: 8GXEqrMUHkf0rJui+jswzfKlfWS1wjU9u2oV8cCwQ60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl
                          rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199656, serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
        Validity
            Not Before: Apr  5 06:29:43 2026 GMT
            Not After : Apr 12 06:29:43 2026 GMT
        Subject: CN=69d20157-1604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:aa:f6:d6:b1:1a:4b:79:fb:d3:e3:83:7a:
                    fc:e7:2c:00:19:15:6b:b4:64:f7:13:04:8c:5e:ec:
                    5b:5c:8a:ec:c1:06:61:4c:25:6b:7e:b4:3f:1b:96:
                    ac:72:2b:8e:07:a9:0a:d8:ed:ce:16:26:53:86:6e:
                    ac:15:d4:a7:4f:1c:f8:f7:38:dc:5a:35:e9:da:78:
                    ab:41:ce:0f:cf:d6:1d:b9:ae:84:e0:b8:8e:54:48:
                    37:42:2c:86:57:99:13:c4:39:72:d6:e2:d6:ab:87:
                    e4:2d:e5:57:f5:29:e6:f0:35:4f:33:2c:a0:58:c9:
                    42:4d:b2:19:b0:bb:55:23:ae:16:3e:8a:58:bc:c5:
                    9a:90:e1:cd:05:00:40:88:f9:cb:9e:e1:95:f4:43:
                    ea:9c:71:fc:2d:17:6e:12:d4:ce:af:f8:5e:90:1e:
                    0f:c6:33:0f:78:63:6c:0c:b0:89:1f:5f:1e:33:3e:
                    1b:10:3b:18:8a:20:9b:fd:91:56:7a:95:bc:70:42:
                    b9:4d:4f:0f:3c:6f:be:14:b8:35:52:26:a5:8d:f4:
                    28:ff:4f:2e:61:be:d3:d6:f6:5c:b1:d4:4a:6c:c4:
                    c6:37:6e:89:2c:3e:22:3b:a7:42:f1:48:a2:07:d4:
                    63:39:42:66:26:a6:cc:f0:10:78:66:59:cb:5c:56:
                    22:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4A:CC:EC:65:5E:34:D0:73:E6:82:1A:37:68:DC:97:63:12:1D:A7
            X509v3 Authority Key Identifier:
                keyid:C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:12:4c:46:02:5f:9b:8e:34:7a:3d:c6:74:aa:ee:6a:16:db:
         42:e5:26:bc:8d:07:5c:44:85:c7:6c:9e:0a:fc:98:64:26:4f:
         c0:e7:09:7d:d1:74:d0:65:42:70:e1:f1:cb:97:9b:98:de:8b:
         e2:05:06:0d:68:a0:1d:e2:dd:c3:70:d7:c5:c1:0b:ab:b6:05:
         9c:16:6c:41:a5:eb:4a:6a:19:00:49:c0:54:27:77:87:f7:7b:
         e4:f5:36:90:34:6d:0b:69:ce:e2:a5:d4:b6:2c:78:41:09:a3:
         79:0b:e3:78:a2:a5:94:3b:5d:67:8e:5b:59:a3:07:32:3e:ee:
         12:e2:c6:8b:c8:d9:0f:04:2e:36:d0:c9:41:bd:60:a5:17:35:
         56:c1:9e:0b:1b:6d:9c:d5:44:e2:01:22:ee:9c:ba:c3:c4:8d:
         0c:1d:69:ad:2d:5a:5f:6b:7c:1a:ad:ec:2e:cb:c3:d8:ee:3f:
         0e:d0:f2:c6:70:19:d5:81:f7:b9:37:9b:30:be:86:ba:7e:c9:
         44:38:90:6e:f6:56:56:91:af:84:22:fb:98:2a:4a:8a:09:d2:
         4e:57:fd:b8:25:90:a0:05:81:80:82:17:11:2e:fb:39:68:c5:
         66:5e:7a:bd:f9:c9:82:75:4f:0e:20:5e:3a:25:59:d5:1c:c3:
         12:61:99:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk2NTYxMTAvBgNVBAUTKEM5QzMwQjdDNTdFMkYwMTZEQjFGMDFDMDlFNTkyRTA1
MDQ3NEM5QTYwHhcNMjYwNDA1MDYyOTQzWhcNMjYwNDEyMDYyOTQzWjAYMRYwFAYD
VQQDEw02OWQyMDE1Ny0xNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq3Oq9taxGkt5+9Pjg3r85ywAGRVrtGT3EwSMXuxbXIrswQZhTCVrfrQ/G5as
ciuOB6kK2O3OFiZThm6sFdSnTxz49zjcWjXp2nirQc4Pz9Ydua6E4LiOVEg3QiyG
V5kTxDly1uLWq4fkLeVX9Snm8DVPMyygWMlCTbIZsLtVI64WPopYvMWakOHNBQBA
iPnLnuGV9EPqnHH8LRduEtTOr/hekB4PxjMPeGNsDLCJH18eMz4bEDsYiiCb/ZFW
epW8cEK5TU8PPG++FLg1UialjfQo/08uYb7T1vZcsdRKbMTGN26JLD4iO6dC8Uii
B9RjOUJmJqbM8BB4ZlnLXFYiQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRKzOxl
XjTQc+aCGjdo3JdjEh2nMB8GA1UdIwQYMBaAFMnDC3xX4vAW2x8BwJ5ZLgUEdMmm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY1Ni9BNUU3Q0Q3NjIz
RTExMUYwQTY1MEVBMjNDNEY5QUUwMi95Y01MZkZmaThCYmJId0hBbmxrdUJRUjB5
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ljTUxmRmZpOEJiYkh3SEFubGt1QlFSMHlhWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTY1Ni9BNUU3Q0Q3NjIzRTExMUYwQTY1MEVBMjNDNEY5QUUwMi95Y01MZkZmaThC
YmJId0hBbmxrdUJRUjB5YVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXBJMRgJfm440ej3GdKruahbbQuUmvI0HXESFx2yeCvyYZCZPwOcJfdF00GVC
cOHxy5ebmN6L4gUGDWigHeLdw3DXxcELq7YFnBZsQaXrSmoZAEnAVCd3h/d75PU2
kDRtC2nO4qXUtix4QQmjeQvjeKKllDtdZ45bWaMHMj7uEuLGi8jZDwQuNtDJQb1g
pRc1VsGeCxttnNVE4gEi7py6w8SNDB1prS1aX2t8Gq3sLsvD2O4/DtDyxnAZ1YH3
uTebML6Gun7JRDiQbvZWVpGvhCL7mCpKignSTlf9uCWQoAWBgIIXES77OWjFZl56
vfnJgnVPDiBeOiVZ1RzDEmGZpg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:00 2026 by rpki-client